This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313334383233.roa
File: 3130332e3131382e3231322e302f32322d3234203d3e20313334383233.roa (raw, json)
Hash identifier: B/Qk1rNOcXuU39uKfh2MmMKvquO/OBQ+YiUaobFCZzY=
Subject key identifier: F3:F4:D3:FD:D5:B5:83:84:DF:55:88:FF:A0:46:C2:28:8B:C2:A4:54
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 5CE16D916B775A0566C9D08AE4F2FED65A9314E4
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313334383233.roa
Signing time: Tue 20 Jan 2026 02:09:35 +0000
ROA not before: Tue 20 Jan 2026 02:04:35 +0000
ROA not after: Tue 19 Jan 2027 02:09:35 +0000
asID: 134823
IP address blocks: 103.118.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e1:6d:91:6b:77:5a:05:66:c9:d0:8a:e4:f2:fe:d6:5a:93:14:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: Jan 20 02:04:35 2026 GMT
Not After : Jan 19 02:09:35 2027 GMT
Subject: CN=F3F4D3FDD5B58384DF5588FFA046C2288BC2A454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:d5:2a:31:77:66:6e:e8:73:a0:56:d4:13:
38:4a:e0:7e:c8:62:ce:18:4f:05:f1:b2:c8:c4:9c:
e8:68:38:84:79:bf:7b:c5:62:3c:3a:c1:71:b2:82:
af:cf:85:7b:99:4b:3d:41:5e:26:a1:4f:41:ed:4e:
72:38:02:bb:07:08:78:be:76:3d:48:7b:b0:b1:e0:
26:b9:20:c3:6e:03:dc:f0:4f:3b:2d:1e:2a:2d:e9:
37:80:41:8b:26:34:47:3c:58:97:a7:d9:47:85:2d:
df:9a:56:a3:49:50:48:44:2e:78:83:fb:df:19:8b:
48:0f:01:a4:9a:7f:82:87:44:07:a1:7a:95:be:d9:
37:74:50:a9:18:6c:94:ef:f2:58:2c:ee:0b:50:3f:
5c:d4:83:95:72:0d:72:f8:ce:db:11:91:66:12:71:
e9:ba:10:98:1b:59:46:51:c6:f6:88:41:ee:03:7e:
0e:6b:41:17:14:4b:8f:e8:8e:93:78:2b:c8:b6:5b:
d4:a3:4b:4f:19:42:48:78:95:a3:5e:3e:c8:11:a2:
06:08:34:05:ca:02:85:91:20:82:0a:42:52:41:a0:
d8:d2:13:89:86:52:37:b6:68:b0:56:d3:4a:0b:cc:
e6:c9:58:38:5c:4c:50:28:2e:3d:9a:7c:d4:da:01:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F4:D3:FD:D5:B5:83:84:DF:55:88:FF:A0:46:C2:28:8B:C2:A4:54
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.212.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:2f:8b:91:0f:e6:15:ca:28:89:72:37:8d:ce:93:1c:f5:53:
12:2f:20:3e:bd:69:d0:18:3c:07:6c:1f:4a:5b:ce:2d:56:6c:
58:4a:bf:bb:55:ad:dc:97:f0:c7:3f:70:59:de:a1:c9:61:ca:
8f:27:38:30:55:30:76:ec:1c:a0:b4:f2:bf:ae:41:48:83:ea:
de:99:09:63:d0:85:8f:58:48:a5:7b:8a:17:65:d5:60:88:33:
5e:4c:b7:b5:f8:5f:11:22:35:03:8f:0d:cd:ac:1a:49:13:da:
17:72:29:20:5f:1d:54:11:dd:35:be:3f:b1:fc:bb:9f:8b:4d:
ba:c9:73:3a:8e:91:bf:29:34:51:fb:ee:96:d6:a3:18:e6:eb:
e0:22:90:74:4e:e3:bf:59:bd:23:27:db:0b:9f:a2:ff:18:86:
d1:cd:9b:bc:1b:c3:a6:cf:c4:a9:13:83:54:ec:4e:60:39:9c:
b1:92:30:11:45:68:ec:2e:4e:a8:98:de:98:0d:a0:f1:f6:df:
35:86:6c:12:cb:f4:46:c5:3b:fb:f5:eb:1e:02:35:9d:d9:c8:
6a:97:fa:8b:0b:a7:40:16:b4:56:db:ff:2b:a1:b0:54:d6:b2:
ce:14:44:c1:6d:6e:1c:a1:14:2a:9e:37:d0:1f:a2:16:0b:44:
13:a6:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:13 2026 by rpki-client